topic Re: How do you create dummy values in a trellis chart? in Splunk Search

How do you create dummy values in a trellis chart?

tseale — Mon, 21 Jan 2019 14:39:56 GMT

I have locations 1-6, and I am needing them to stay in the same spot, even if in the time event, there is not a quantity value in the location.

index="data" 
| stats sum(Quantity) by Location

It is confusing on the floor when Location 6 is the 3rd tile instead of being on the end. I am needing to create placeholders that are blank for 1-6 that get updated as they start up.

Re: How do you create dummy values in a trellis chart?

niketn — Mon, 21 Jan 2019 15:50:09 GMT

@tseale what are the 6 location names? Are they static or dynamic? Can there be more than 6? Is there is master inventory configuration like lookup file, KV Store or Database table where all 6 locations (if required more) would be listed?

Re: How do you create dummy values in a trellis chart?

tseale — Mon, 21 Jan 2019 16:16:29 GMT

There is always 6. The quantity is aggregated throughout the day. When we pull last 24 hours they rarely all have a quantity for that day. so the they are in different locations.

Re: How do you create dummy values in a trellis chart?

niketn — Mon, 21 Jan 2019 17:04:45 GMT

Sorry still a bit confusing. Could you elaborate with a mock up of what you have and what is the expected output?

Re: How do you create dummy values in a trellis chart?

tseale — Mon, 21 Jan 2019 18:17:14 GMT

Re: How do you create dummy values in a trellis chart?

tseale — Mon, 21 Jan 2019 18:18:18 GMT

I am wanting a box for 5 with the value blank or 0 in between box 4 and 6

Re: How do you create dummy values in a trellis chart?

niketn — Mon, 21 Jan 2019 18:29:04 GMT

@tseale try the following search and confirm. It creates 6 rows with Location 1, 2,3,4,5,6 and respective Quantity as 0. Then dedup is used to retain Location with Quantity from index search and missing Locations with Quantity as 0. I have applied a sort for statistical table but trellis should sort by default.

index="data" 
| stats sum(Quantity) as Quantity by Location
| append [| makeresults count=6
| fields - _time
| streamstats count as Location
| eval Quantity=0]
| dedup Location
| sort Location

Re: How do you create dummy values in a trellis chart?

tseale — Mon, 21 Jan 2019 18:43:11 GMT

That worked, only change I had to make was |sort Location to get them in the right order.

Thank you so much!